Hi @Paulo RSec,

 

Just to confirm, have you followed this article to enable SSH on the switch? https://dell.to/3JWtwk5

 

What is the model of the switch? What is the current firmware version of the switch? Is this a new setup or it has existing configuration?

Hi Joey C

The switch was with SSH active, but after a reboot I could no longer access via SSH, only via console cable.

Yes, I followed the article to enable SSH, I run the command "ip ssh server enable" but it is not listed in the "show run" and when checking the log I find the message reported in the previous post.

The switch is a Force 10 S50 with Software Version 8.4.2.7.

The switch has been in production since 2013.

Paulo RSec,

 

Would you confirm what prompt you are running the command from, such as FTOS>, FTOS#, etc? Also, would you confirm the command mode and syntax used, as seen on page 936 here.

 

Let us know.

Chris Hank

I run the commands as described in the article

https://dell.to/3JWtwk5

Dell#configure
Dell(conf)#ip ssh server enable
Dell(conf)#crypto key generate

only point is on the line
Dell(conf)#crypto key generate which I change to Dell(conf)#crypto key generate rsa.

Paulo RSec,

 

I think the issue is with directly specifying rsa, as both rsa and dsa are required. If you remove the rsa from the command I believe both are installed and it should work. 

Let me know what you see.

 

 

Below are the possible command lines in the switch

Dell(conf)#crypto ?
key               SSH key generation
Dell(conf)#crypto key ?
generate      Generate SSH keys
Dell(conf)#crypto key generate ?
rsa              Generate SSHv2 RSA host key
rsa1            Generate SSHv1 RSA host key

Cannot run command "crypto key generate" without rsa or ra1 options

Paulo RSec,,

 

 

Thank you. I wasn't sure. We may need to delve into this deeper. Would you be able to pull the logs and upload them here. Afterwards will you private message the svc tag used to upload the logs to Joey and I, so that we can retrieve them?

 

Thanks.

 

 

Hi @Paulo RSec,

 

I gave a small research on the article, it seems it's only for OS9 which doesn't require additional RSA command, but OS8 does. For S50, OS8 is only available, and I can't find any resource on S50 OS8 article for your reference. You may need to try use the RSA host key generation. Hence, Dell(conf)#crypto key generate RSA.